Research
Discover advanced research and insights into offensive security techniques, methodologies, and case studies to strengthen your cybersecurity defenses.
We found a heap buffer overflow in NVIDIA Warp's .wrp graph deserializer that allows an attacker to overwrite heap memory with controlled data via a crafted file, leading to a crash or potentially arbitrary code execution.
We found an unauthenticated arbitrary file read in Gazebo Sim's WebsocketServer plugin where a single WebSocket frame reads any file on the server, including /etc/shadow and SSH keys.
We found an integer overflow in Bullet3's STL mesh loader where a crafted triangle count bypasses the sanity check, causing the parser to read 4 GB from an 88-byte heap buffer.
We fine-tuned a Flux Dev LoRA on 12 images to generate custom figurine designs in a specific art style, from data preparation to a working Gradio app.
